You might want to use an ssl checking app to probe the server and see what it reports. The app that I have isn't in the "[google] app store" any longer, but a search for "ssl checker" turns up two or three options. I haven't used any of them so don't know how robust they are.
> Date: Monday, February 08, 2016 08:22:02 -0800 > From: Steve Evans <[email protected]> > > The relevant courier setting is: > >## NAME: TLS_PROTOCOL:0 ># ># TLS_PROTOCOL sets the protocol version. The possible versions ># are: ># ># OpenSSL: ># ># SSL3 - SSLv3 ># SSL23 - all protocols (including TLS 1.x protocols) ># TLS1 - TLS1 ># TLSv1.1 - TLS1.1 ># TLSv1.2 - TLS1.2 ># ># Leave it unset to use any protocol except SSL 2. > > I have it unset, so it should support TLS 1.1 and 1.2. As an > experiment I have changed it to TLS 1.1 and 1.2 only, then > restarted the server. That did not fix it. > > The logging levels have been increased but aren't showing a lot of > extra information. I will dig deeper to see if more information > is possible. > > On Monday, 8 February 2016 16:07:34 UTC, Richard wrote: >> >> Make certain that the "ssl protocols" that your imap server >> supports include TLS v1.1 and 1.2. I'm not certain that >> android-6/k-9 are happy with SSLv3 any longer. Most imap servers >> get that from the underlying system-level SSL libraries, not >> built-in, but I don't use courier so can't say for certain in >> your environment. [On my imap server I have SSLv2 and v3 >> explicitly disabled.] >> >> I think that your logs should give hints, if you have the logging >> level set high enough. >> >> >> > Date: Monday, February 08, 2016 07:38:38 -0800 >> > From: Steve Evans <[email protected] <javascript:>> >> > >> > These are devices that have been updated. The Nexus 7 tablet >> > was updated in October and k9 mail hasn't worked since. The >> > Moto X Play just updated this weekend and similarly stopped >> > working. >> > >> > I have regenerated the SSL certificate and gone through K9's >> > Incoming Server/Next options. K9 warned me about the unsigned >> > certificate, with an Accept Key option that I selected. It >> > still didn't work. >> > >> > >> > On Monday, 8 February 2016 15:11:29 UTC, Richard wrote: >> >> >> >> >> >> >> >> > Date: Monday, February 08, 2016 06:58:18 -0800 >> >> > From: Steve Evans <[email protected] <javascript:>> >> >> > >> >> > >> >> > >> >> > I cannot fetch mail from my courier imap ssl server from >> >> > k9mail on Android 6. it worked on Android 5.1. I have >> >> > made no changes to the settings, which are: >> >> > >> >> > >> >> > Security: SSL/TLS >> >> > Port: 993 >> >> > Authentication: Normal password >> >> > Auto-detect IMAP namespace >> >> > >> >> > >> >> > The server has a self signed SSL certificate which has not >> >> > expired. >> >> > >> >> > This happens on both my Nexus 7 tablet and my Moto X play >> >> > phone. >> >> >> >> Did this issue start when the devices were updated from >> >> Android-5.x to 6, or are these new devices (that came with >> >> 6)? >> >> >> >> Self-signed certs are a bit tricky as they require explicit >> >> acceptance (by any mail client) at setup, whether they are >> >> unexpired or not. >> >> >> >> If you haven't already, go through the "fetching mail/incoming >> >> mail server" setup and select the "next". That should test >> >> the connection and generally results in a cert acceptance >> >> prompt. If there's some other issue it should be reported >> >> there too. >> >> >> >> If you've done that, then look at the imap server logs and see >> >> what it's saying about the incoming connection. You may need >> >> to turn up the logging level some to be able to see useful >> >> output. >> >> >> >> ------------ End Original Message ------------ >> >> ------------ End Original Message ------------ -- -- You received this message because you are subscribed to the K-9 Mail Users List. To post to this group, send email to [email protected] To unsubscribe, email [email protected] To report an issue with K-9 Mail, visit http://code.google.com/p/k9mail/issues/list For more options, visit this group at http://groups.google.com/group/k-9-mail --- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
